ThreatCluster

Citrix NetScaler ADC and Gateway XSS Vulnerability Disclosed

First seen 12 Nov 2025, 21:25 UTC Cybersecuritynews 80% similarity 28

Article Content

Browse articles
ThreatCluster

Cloud Software Group has disclosed a cross-site scripting (XSS) vulnerability in NetScaler ADC and NetScaler Gateway products, tracked as CVE-2025-12101. This flaw allows attackers to inject malicious scripts into web pages, potentially leading to session hijacking and data theft. The vulnerability has a CVSSv4 score of 5.9, indicating moderate severity and reliance on user interaction.

ThreatCluster AI How this analysis works

Community

Browse all →

Tracked Entities in This Story